neveergiveup[.]weebly[.]com

The domain neveergiveup.weebly.com was observed on July 23, 2026 as a brand‑impersonation of AT&T. It is hosted on the Weebly platform, resolving to the IPv4 address 74.115.51.9, which belongs to AS27647 (Weebly, Inc.) and is located in the United States. The site presented a TLS certificate issued by Let’s Encrypt (certificate identifier E8), providing transport‑layer encryption but offering no indication of legitimacy. The HTTP response returned a 404 status code, and the page title reported by the crawler was "Home," suggesting that the expected content was unavailable at the time of analysis.

Domain registration records show creation on March 29, 2006, with Safenames Ltd listed as the registrar and four Amazon Route 53 nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The infrastructure fingerprint includes Cloudflare technology, which may be employed for traffic routing or concealment. Reputation checks indicate that the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis recorded 15 positive detections out of 93 scanned security vendors, reinforcing the malicious assessment.

While the site is currently offline, the historical evidence of brand impersonation, the presence of a valid TLS certificate, and multiple detection signals justify a high confidence rating for malicious intent. Defenders should add the domain and its resolved IP address to perimeter blocklists, monitor for any re‑registration or resurrection of the subdomain, and consider sinkholing the IP to disrupt any future activity. Continuous threat‑intel feeds should be consulted for new indicators related to this infrastructure.